Re: Re: <input type="text" value="He said, "How do I get this to work?", with a frown" size="50">
| From: | Red Wingate | Date: | Tue, 16 Mar 2004 13:37:58 +0000 |
| Subject: | Re: Re: <input type="text" value="He said, "How do I get this to work?", with a frown" size="50"> | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-180653@lists.php.net to get a copy of this message | ||
[...]
> Why are so many people telling this poor person to escape their quotes?
> That WILL NOT WORK in HTML. The correct way to do this is to use
> htmlspecialchars() or htmlentities(). In fact, this should always be
> done on dynamic values in an input or any other HTML data that should be
> displayed literally, such as for within textareas.
[...]
Thanks, was just about to write that as i read all of these 'use escape-chars
in HTML'-guys.
red